Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

PowerVR GPU driver allows user program to corrupt memory

CVE-2022-20235 · published 3 years ago
Summary

On Android devices that use the PowerVR graphics driver, a flaw lets applications write to a special memory page that should be protected. This can cause the system to become unstable or crash. Updating the driver to version 1.18 or later fixes the issue.

What to do
  • Update google :unknown: to version SoCVersion:2023-01-05.
Affected software
Ecosystem VendorProductAffected versions
Android google :unknown: >= SoCVersion:0, < SoCVersion:2023-01-05
Fix: upgrade to SoCVersion:2023-01-05
– google android All versions
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Original advisory text
The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space progra...
The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to memory corruption issues.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published1 Jan 2023
Updated4 Nov 2026
First seen10 Sep 2026
Sources
ASB-A-259967780 · OSV
CVE-2022-20235 · NVD
Track software like this
Free during beta